ELK日志监控

1.Elasticsearch 2.0.0 Install

1-1.下载文件到本地：

https://www.elastic.co/downloads/elasticsearch

wget https://download.elasticsearch.org/elasticsearch/release/org/elasticsearch/distribution/tar/elasticsearch/2.0.0/elasticsearch-2.0.0.tar.gz

在项目根目录下新建data文件夹

#mkdir data

1-2.设置服务ip&&port

修改文件elasticsearch.yml

 #pwd
/data2/elasticsearch-2.0.0/config
[root@10 config]# vim elasticsearch.yml 

修改成服务ip和port

 network.host: 10.13.1.139
 http.port: 54321

1-3.安装插件

在项目根目录下没有plugins文件夹，需通过安装插件新建该文件夹，
the core plugins can be installed as follows:

[root@10 bin]# pwd
/data2/elasticsearch-2.0.0/bin
[root@10 bin]# ./plugin install analysis-icu
-> Installing analysis-icu...
Plugins directory [/data2/elasticsearch-2.0.0/plugins] does not exist. Creating


1-4.sudo用户修改文件为读写执行(启动服务时，需非Root账号)

非Root账号启动服务时，会新建文件